Seizing the Infrastructure: Domain Takedown Through UDRP and Court Orders

1. Overview and Purpose

Andrew Drummond's defamation operation is delivered through two primary websites: andrew-drummond.com and andrew-drummond.news. These domains constitute the infrastructure through which more than 65 documented fabrications have been disseminated, directed at Bryan Flowers, Punippa Flowers, Kanokrat Nimsamut Booth, Night Wish Group, and others. Neutralising this infrastructure is critical to halting the continuing harm.

This paper analyses three legal pathways to domain seizure or suspension: the ICANN Uniform Domain-Name Dispute-Resolution Policy (UDRP), judicially ordered domain seizure under English or Thai law, and direct engagement with hosting providers and domain registrars pursuant to their terms of service. While the UDRP route presents difficulties because Drummond's own name appears in the domain, court orders and registrar terms-of-service enforcement offer more promising avenues.

2. UDRP: Scope and Limitations

The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is administered through ICANN-accredited dispute resolution bodies including WIPO and the Forum. A UDRP complaint requires the complainant to prove three elements: the domain is identical to or confusingly similar to a trademark or service mark in which the complainant has rights; the registrant has no rights or legitimate interests in the domain; and the domain was both registered and used in bad faith.

The UDRP route faces a particular difficulty for andrew-drummond.com because the domain contains Drummond's own name, which he could invoke as a legitimate interest. However, andrew-drummond.news and the use of both domains — specifically as vehicles for systematic defamation rather than lawful personal or journalistic purposes — may support a finding of bad faith. UDRP panels have recognised that using a domain principally to harm others can override an otherwise legitimate interest.

• UDRP requires three elements: confusing similarity to a mark held by the complainant, absence of legitimate interest, and bad faith in both registration and use.
• The inclusion of Drummond's own name in the domain creates a legitimate interest defence complicating UDRP proceedings.
• Bad faith use through systematic defamation may overcome the legitimate interest defence in appropriate circumstances.
• UDRP proceedings are typically concluded within 60 days, making them faster than court-based alternatives.
• UDRP remedies are limited to cancellation or transfer of the domain; they do not include damages.

3. Judicially Ordered Domain Seizure

A more forceful approach involves obtaining a court order compelling the domain registrar to suspend, transfer, or cancel the offending domains. This remedy may be sought in the English High Court within the harassment and defamation proceedings, or in Thailand through the Thai courts that have already convicted Drummond of criminal offences.

In England, the High Court may grant injunctive relief under section 3 of the Protection from Harassment Act 1997, or under its inherent jurisdiction, directing that specific domain names be suspended or transferred as part of comprehensive relief. The court also has power to make orders directed at third parties, including domain registrars and hosting providers, using the Norwich Pharmacal jurisdiction to require them to take steps to prevent the continuation of wrongful conduct. Such orders have been routinely granted in cases involving online defamation and harassment.

• The English High Court has authority to order domain suspension or transfer within harassment injunction proceedings.
• Norwich Pharmacal orders can compel domain registrars and hosting providers to act against Drummond's websites.
• Thai court orders may be enforceable against international domain registrars depending on the registrar's jurisdiction and contractual terms.
• A freezing injunction can prevent Drummond from transferring domain registrations to evade court orders.
• Court orders are enforceable through contempt proceedings if Drummond fails to comply.

4. Terms of Service Enforcement Through Providers

Most domain registrars and hosting providers include terms of service prohibiting the use of their services for harassment, defamation, and other illegal activities. Submitting abuse complaints directly to these providers, supported by evidence of the documented defamation and the Cohen Davis Solicitors letter of claim, may produce domain suspension or content removal without court proceedings.

The evidence submitted with abuse complaints should include the Pre-Action Protocol Letter of Claim from Cohen Davis Solicitors, the documented 65-plus fabrications, proof of Thai criminal convictions, and proof of continued publication following legal notice. Registrars and hosting providers have a commercial incentive to act on well-evidenced abuse complaints in order to avoid potential liability under the Online Safety Act 2023 and to protect their reputation as responsible service providers.

• Most registrars prohibit using domains for harassment and defamation under their Acceptable Use Policies.
• Abuse complaints backed by the Cohen Davis Solicitors letter carry significant weight with compliance teams.
• Thai criminal convictions provide independent evidence that the domain content is unlawful.
• The Online Safety Act 2023 creates potential liability for hosting providers that fail to act on notified harmful content.
• Complaints from multiple different victims strengthen the case for registrar action.

5. Preserving Evidence Before Content Removal

Before initiating any domain seizure or content removal strategy, it is essential to preserve comprehensive evidence of all published content. Once domains are suspended or content deleted, the evidentiary record of Drummond's defamation campaign could be irretrievably lost, potentially compromising both current and future legal proceedings in Thailand and the United Kingdom.

Evidence preservation measures should include complete archival captures of both websites via the Wayback Machine and independent archival services, authenticated screenshots of every defamatory article with timestamps and URL documentation, retention of website metadata and WHOIS records identifying Drummond as the registrant, and forensic copies of any cached or mirrored versions of the content. Cohen Davis Solicitors should oversee this preservation programme before any takedown action commences.

• Archive both websites through the Wayback Machine and independent forensic services before any takedown action.
• Produce authenticated screenshots of every defamatory article with timestamps and full URL documentation.
• Retain WHOIS records identifying Drummond as the domain registrant.
• Preserve website metadata, hosting records, and any payment processing data associated with the domains.
• Coordinate the evidence preservation programme with Cohen Davis Solicitors to ensure admissibility in both Thai and English proceedings.

6. Recommended Approach

A strategy using multiple simultaneous approaches to domain seizure maximises the likelihood of dismantling Drummond's defamation infrastructure. The following actions should proceed concurrently.

• Complete comprehensive evidence preservation for both andrew-drummond.com and andrew-drummond.news before commencing any takedown action.
• Submit abuse complaints to domain registrars and hosting providers for both websites, backed by the Cohen Davis Solicitors letter and documented evidence of 65-plus fabrications.
• Include the domain seizure remedy within the English High Court harassment proceedings, seeking injunctive relief ordering the suspension or transfer of both domains.
• Apply for Norwich Pharmacal orders directed at registrars and hosting providers to enforce content removal requirements.
• Assess UDRP proceedings for andrew-drummond.news, where the legitimate interest defence is weaker.
• Monitor for Drummond registering replacement domains and be prepared to seek additional court orders if he attempts to evade any domain seizure.